Privacy Policy
Last updated: 8 August 2026
1. Controller and contact
DirectHeader ("we", "us", or "our") is the controller of personal data collected through https://www.directheader.com. If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact us at [email protected].
2. Personal data we collect
Depending on how you interact with our website, we may collect: (a) technical information such as your IP address, browser type, operating system, device information, and pages visited; (b) information you voluntarily provide through our contact form, including your name, email address, company name, and message; and (c) cookie and preference data where you have provided consent. We do not intentionally collect special categories of personal data unless you choose to provide them.
3. Why we process your data
We process personal data to operate, secure, and improve our website; respond to enquiries and provide requested services; communicate with prospective clients; comply with legal obligations; and send marketing communications where you have given consent. Our legal bases under the General Data Protection Regulation (GDPR) include consent, legitimate interests, contractual necessity, and legal obligations, depending on the specific processing activity.
4. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and protect our legitimate business interests. Contact enquiries are retained only for the period reasonably necessary to respond and maintain business records. Cookie and preference data are retained according to your consent choices and applicable cookie lifetimes.
5. Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. While no method of electronic transmission or storage can guarantee absolute security, we continuously work to maintain an appropriate level of protection.
6. Sharing personal data
We may share personal data with trusted service providers that help us operate our business and website, including hosting providers, email delivery services, contact form providers, analytics providers, and customer support tools. These providers process personal data only on our behalf and under appropriate contractual safeguards. We may also disclose information where required by law or to protect our legal rights. We do not sell or rent personal data.
7. International data transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are implemented in accordance with GDPR requirements, including the use of European Commission Standard Contractual Clauses or other lawful transfer mechanisms where applicable.
8. Data Processing Agreements (DPA)
Where DirectHeader processes personal data on behalf of clients, including during the development or maintenance of websites and digital services, we enter into Data Processing Agreements that comply with Article 28 of the GDPR. These agreements define responsibilities relating to confidentiality, security, sub-processors, data subject rights, and data protection obligations.
9. Your GDPR rights
Subject to applicable law, you have the right to access your personal data, request correction of inaccurate information, request deletion of your data, restrict or object to certain processing activities, request data portability, withdraw consent where processing is based on consent, and lodge a complaint with your local data protection authority.
10. Data subject requests
To request access to, correction of, or deletion of your personal data, please contact us at [email protected] using the subject line "Data Request" or "Deletion Request". We may request reasonable verification of your identity before processing your request. We aim to respond within one month in accordance with GDPR requirements.
11. Cookies
Our website uses cookies and similar technologies. Strictly necessary cookies are used to ensure the website functions correctly. Analytics, preference, and marketing cookies are only used where you have provided your consent through our cookie banner. Declining optional cookies will not affect the core functionality of the website. You may update your cookie preferences at any time through the "Cookie Settings" link available in the website footer.
12. Children's privacy
Our website and services are not directed towards individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us and we will take appropriate steps to remove such information.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technologies, or our business operations. The most recent version will always be published on this page together with the updated "Last updated" date.
For privacy enquiries or to exercise your GDPR rights, contact us at [email protected].